Author Topic: [C#]SQL Injection - help  (Read 2738 times)

0 Members and 1 Guest are viewing this topic.

Offline globus25

  • /dev/null
  • *
  • Posts: 5
  • Cookies: 0
    • View Profile
[C#]SQL Injection - help
« on: December 25, 2011, 09:40:03 pm »
Okey so just like I mentioned in Introduction Im looking for info how to write SQL Injection tool... is there anyone that can give me some pointers how to access from this kind of link ->"
http://site.com/brow.php?id=12" the db of server? or how to find vulnerabilities crawling through links... anything on that topic will be helpful

Offline ande

  • Owner
  • Titan
  • *
  • Posts: 2664
  • Cookies: 256
    • View Profile
Re: [C#]SQL Injection - help
« Reply #1 on: December 25, 2011, 09:41:24 pm »
If you have a good understand of SQL injection and web scripting. As well as coding knowledge, this should be no problem. I would start with learning SQL injection before making a tool for it?
if($statement) { unless(!$statement) { // Very sure } }
https://evilzone.org/?hack=true

Offline ca0s

  • VIP
  • Sir
  • *
  • Posts: 432
  • Cookies: 53
    • View Profile
    • ka0labs #
Re: [C#]SQL Injection - help
« Reply #2 on: December 25, 2011, 10:32:07 pm »
Check this piece of shit I made time ago:
http://evilzone.org/scripting-languages/sql-inyector/msg459/

Offline Stackprotector

  • Administrator
  • Titan
  • *
  • Posts: 2515
  • Cookies: 205
    • View Profile
Re: [C#]SQL Injection - help
« Reply #3 on: December 27, 2011, 06:04:02 pm »
as ande states, you need alot of knowledge about sqli and blind-sqli.

There are loads of testable injection methods,  so to create an more advance tool will take some time :)
~Factionwars